Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVATN2L8luAH9fdBRqMH68r2nNw.cer
File:                     LVATN2L8luAH9fdBRqMH68r2nNw.cer (raw, json)
Hash identifier:          78HdnLm7auCVWfYogxdoRfOkIjp9Ch6pqnLmVEEg0w4=
Subject key identifier:   2D:50:13:37:62:FC:96:E0:07:F5:F7:41:46:A3:07:EB:CA:F6:9C:DC
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01BC88
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.sub.apnic.net/repository/A918C2870000/0/2D50133762FC96E007F5F74146A307EBCAF69CDC.mft
caRepository:             rsync://rpki.sub.apnic.net/repository/A918C2870000/0
Notify URL:               https://rrdp.sub.apnic.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 00:53:32 +0000
Certificate not after:    Sat 01 May 2038 00:00:00 +0000
Subordinate resources:    AS: 45163
                          AS: 55471
                          AS: 131211
                          IP: 203.176.189.0/24
                          IP: 2001:df0:90::/48
                          IP: 2401:4600::/32
                          IP: 2401:e640::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113800 (0x1bc88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Sep 11 00:53:32 2023 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=A918C2870000/serialNumber=2D50133762FC96E007F5F74146A307EBCAF69CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:b2:60:11:89:06:fb:c4:5e:af:8b:be:34:
                    08:16:96:2e:2b:af:e1:0e:23:0f:15:24:da:f9:f2:
                    5e:ef:28:90:e7:78:8b:b5:7d:0c:f5:09:51:ce:24:
                    08:55:63:b3:9b:8a:be:35:4f:6d:59:24:20:86:7d:
                    ec:9f:e7:70:91:a9:d7:40:0b:34:ae:ca:9c:e9:23:
                    f2:61:f9:10:f6:20:4c:2a:20:42:ee:23:ff:32:52:
                    3b:4b:97:32:42:77:62:1c:c2:24:9b:d8:88:ad:da:
                    dc:ce:f9:c1:e2:a8:4a:b6:d4:87:22:87:f2:87:b9:
                    7b:8e:81:16:c7:64:05:89:bb:ce:a2:5c:3a:d4:1d:
                    0b:5d:ca:77:09:0e:80:fa:45:fd:2e:a3:21:a8:e6:
                    f3:3f:a4:d3:ba:af:78:57:43:b5:8b:d4:72:fc:fb:
                    fb:c1:3c:c4:32:e0:34:c2:ed:89:28:9c:01:7b:da:
                    aa:fc:f6:5b:df:11:ad:ee:03:5f:ff:4d:1e:81:db:
                    52:f4:47:33:14:1b:75:84:a1:c9:bd:81:2b:76:eb:
                    bd:44:a1:77:64:5b:62:e8:e1:24:0a:f8:97:9f:d7:
                    93:f9:e8:6d:e6:e0:2a:56:09:49:d9:e0:54:25:5d:
                    e0:bf:8a:03:6f:a1:39:83:d1:77:45:dd:eb:83:b3:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:13:37:62:FC:96:E0:07:F5:F7:41:46:A3:07:EB:CA:F6:9C:DC
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0
                RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A918C2870000/0/2D50133762FC96E007F5F74146A307EBCAF69CDC.mft
                RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  45163
                  55471
                  131211

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24
                IPv6:
                  2001:df0:90::/48
                  2401:4600::/32
                  2401:e640::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:1d:06:33:9f:9c:bd:e0:3c:3a:00:e8:77:dc:e9:3b:35:
         b9:3a:9b:4d:ed:9c:d3:0d:93:fd:e7:57:2c:77:28:ec:4d:0f:
         16:66:85:a2:e4:e9:c3:74:9d:2a:f1:22:72:d1:59:23:74:bd:
         28:9b:1a:e5:21:29:9b:f5:a5:83:f7:14:4b:d3:c1:05:db:c0:
         f8:c4:2b:aa:55:85:c4:52:24:ec:d5:4e:79:a8:60:c1:d2:71:
         69:4f:cb:20:ca:2b:71:29:d7:97:5f:96:91:fc:68:92:80:c9:
         1b:66:7c:05:51:50:c6:d8:4b:6a:2f:49:15:87:32:31:68:fd:
         57:54:62:db:e0:af:ba:da:1b:af:d2:b6:21:64:c4:72:97:3e:
         63:81:59:0b:95:6c:83:e3:cc:1c:91:dc:1c:42:1c:da:18:09:
         a9:86:6f:5d:9d:f5:ab:dd:dd:fb:cd:5a:2f:54:3d:a1:02:1d:
         d2:9e:b3:59:c8:8b:47:8e:ca:25:37:d3:12:18:cb:00:55:1f:
         7f:22:b6:a3:21:de:6f:ab:4d:73:50:31:ad:59:c2:35:2f:90:
         ae:99:08:a7:45:49:f4:19:8b:c8:cb:22:1a:29:1d:4c:15:72:
         1a:d0:a8:a0:40:83:9b:b6:49:ec:27:23:e7:c0:a3:d9:83:d0:
         6f:b8:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----